Thanks @pranavkm, I couldn't find npm previously which is why I was expanding the MSI. Making these changes, although for the download there is no HTTPS so going to verify the authenticode signature of Node.exe instead.